Chapter 4 - DSpace at Waseda University

2.5 Event Log
15
Chapter 2
In general, event log [35] is a record while running the Linux kernel. These events are
recorded by sequential order and the network information is recorded as well. In briefly, it
provides the facts of that, “when, where, what, who, and why.” These event logs provide a
standard for analysis problems. Also it makes use of prevention before the problem occurring.
In addition, event logs are using problem verification of real-time and verification of network
status. For example, if the Linux system is down in the middle of operation, everything is
going to waste. How does it explains and how does it prevents such repeated problems.
In general, analysis of event logs progresses as follows.
� Collection: To collect logs with various methods.
� Storage: To transmit events to the one place and save them.
� Analysis: To analyze events with various methods.
� Finding of the causes: To find the causes of problems on the basis of data analysis.
In Figure 2.2, it is the most general way to log the events by an event logging tool. The log
server gathers the event information (such as network event, system call, interrupt etc.).
Event log is necessary to find the cause of problems and to make solution, but it is difficult
to analyze problem. Because event log produces another type of log according to the tools
and logged event information is huge. Also it takes a lot of time to analyze logs because the
amount of log and facts of logs is huge.